New answers tagged syslog
I don't recommend relying on the inode. It will change any time the file moves from the source to the destination machine. It will also change if the files are restored from backups. If the log processing system depends on the inode, if you ever restore from backups the system will not work as you expected. My recommendation is to NOT copy A.log, but ...
Ok, I figured it out, I just had to add this in /etc/rsyslog.conf: $template RemoteHost,"/var/log/%HOSTNAME%/%$YEAR%/%$MONTH%/%$DAY%/syslog.log" *.* ?RemoteHost *.* @@127.0.0.1:514 & ~
rsyslog can emit RFC5424 messages with structured data. But do you also have a way to send RFC5424 messages to rsyslog? -- It should work if you log your messages directly via UDP or TLS. But if you log via traditional BSD Syslog functions then there will not be any structured data, nor any MSGID. (AFAIK NetBSD has the only RFC5424 capable libc with a ...
Basically, they are all the same, in the way they all permit to log data from different types of systems in a central repository. But they are three different project, each project trying to improve the previous one with more reliability and functionnalities. The Syslog project was the very first project. It started in 1980. It is the root project to ...
these are 3 different kind of log managers : it enables your system to collect filter, and transmit/store logs. Syslog (daemon also named sysklogd) is the default LM in common Linux distributions. Light but not very flexible, you can redirect log flux sorted by facility and severity to files and over network (TCP, UDP). rsyslog is an "advanced" version of ...
UDP is a protocol designed to deliver its packets timely, at the expense of lossiness. Whenever there is a problem with packet delivery, the packets will just be dropped. See e.g. this explanation.
You are using a customized path for your log file, so selinux is blocking you. Try to issue setenforce 0 and to restart rsyslog. If it now work, it is confirmed that your problem was selinux. To permanently correct that while continue to use selinux, you need to issue semanage fcontext -a -t var_log_t '/opt/rsyslog(/.*)?'; restorecon -RF /opt/rsyslog ...
If you want to change the frequency of the logs you can set anvil_status_update_time in main.cf. The default is 600s. http://www.postfix.org/postconf.5.html#anvil_status_update_time anvil_set_time_unit = 60s anvil_status_update_time = 2h I had to also set these in order to solve the long delay in logging of incoming mail (non statistics). So if you don't ...
Adding this to a login script can work when logging in via the BASH shell. trap logout INT read -p "Answer it or else: " myAnswer # Log/Handle the answer here. trap INT It was tested by placing it in a user's .bashrc script, but could be put in a system-wide script.
Top 50 recent answers are included